Aggregator

CVE-2024-1999 | Kadence Gutenberg Blocks Plugin up to 3.2.25 on WordPress Testimonial Widget cross site scripting

Vuldb Updates
1 week 6 days ago
A vulnerability was found in Kadence Gutenberg Blocks Plugin up to 3.2.25 on WordPress. It has been classified as problematic. The affected element is an unknown function of the component Testimonial Widget. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2024-1999. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2024-2117 | Elementor Website Builder Plugin up to 3.20.2 on WordPress Path Widget cross site scripting

Vuldb Updates
1 week 6 days ago
A vulnerability was found in Elementor Website Builder Plugin up to 3.20.2 on WordPress and classified as problematic. The affected element is an unknown function of the component Path Widget. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2024-2117. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2024-2039 | Stackable Plugin up to 3.12.11 on WordPress Posts Block cross site scripting (ID 3058710)

Vuldb Updates
1 week 6 days ago
A vulnerability classified as problematic has been found in Stackable Plugin up to 3.12.11 on WordPress. Affected by this issue is some unknown functionality of the component Posts Block Handler. This manipulation causes cross site scripting. This vulnerability appears as CVE-2024-2039. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2024-2026 | Passster Plugin up to 4.2.6.4 on WordPress Shortcode content_protector cross site scripting

Vuldb Updates
1 week 6 days ago
A vulnerability was found in Passster Plugin up to 4.2.6.4 on WordPress. It has been declared as problematic. This affects the function content_protector of the component Shortcode Handler. Executing a manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2024-2026. The attack can be executed remotely. There is not any exploit available.
vuldb.com

Critical FortiSandbox Vulnerabilities Allow Attackers to Execute Unauthorized Commands

Cyber Security News
1 week 6 days ago

Fortinet has disclosed two critical security vulnerabilities affecting its FortiSandbox platform, both carrying a CVSSv3 score of 9.1. The flaws, published on April 14, 2026, could allow unauthenticated remote attackers to execute arbitrary commands and bypass authentication entirely, posing a serious risk to enterprise environments relying on FortiSandbox for advanced threat detection. OS Command Injection […]

The post Critical FortiSandbox Vulnerabilities Allow Attackers to Execute Unauthorized Commands appeared first on Cyber Security News.

Guru Baran

Privacy-Preserving Data Analytics: Stop Collecting What You Do Not Need

Security Boulevard
1 week 6 days ago

There is an almost reflexive habit in data engineering: whenever you instrument an event, you attach a user ID. It feels natural. User IDs are how you join tables, track behavior, and measure engagement. The problem is that most teams attach them without ever asking whether they actually need them. That habit is becoming expensive...

The post Privacy-Preserving Data Analytics: Stop Collecting What You Do Not Need appeared first on Security Boulevard.

Asif Mansoor Amanullah

德国主权科技基金向 Mastodon 资助 61.4 万欧元

Solidot
1 week 6 days ago
德国主权科技基金（Sovereign Tech Fund)向联邦宇宙微博客项目 Mastodon 资助 61.4 万欧元，用于支持 Mastodon 及其软件生态系统的改进和更新。这笔资金将投入到改进：黑名单同步；新的 Fediverse Auxiliary Service Provider(FASP)允许服务器之间共享存储和媒体处理资源；自动化内容检测；私信端到端加密；改进文档。相关改进预计在 2026 年底到 2027 年完成。

Managed ad